Security Situation Analysis and Prediction System for Large-scale Network SSAP

SSAP is developed for national backbone network, large network operators, large enterprises and other large-scale network. The system acquires, understands and displays the security factors which cause changes of network situation, and predict the future development trend of these security factors. This paper describes its architecture and key technologies: security data integration technology for distributed heterogeneous network, association analysis technology oriented the major network security events, real-time analysis technology based on the data flow and multi-dimensional analysis for network security data, network security situation prediction technology, and so on. The performance tests show that SSAP has high real-time and accuracy in security situation analysis and trend prediction. The system meets the demands of analysis and prediction for large-scale network security situation.